Static task
static1
Behavioral task
behavioral1
Sample
c3f2e8fd30333a61c12e21c3184aa491.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c3f2e8fd30333a61c12e21c3184aa491.exe
Resource
win10v2004-20240226-en
General
-
Target
c3f2e8fd30333a61c12e21c3184aa491
-
Size
181KB
-
MD5
c3f2e8fd30333a61c12e21c3184aa491
-
SHA1
8ce372191f5e57689c8aa884189b0c540faf0612
-
SHA256
4917b8502387f28358f9db081bc736c7be1bf0aeae854ab590228a4b63ce7b58
-
SHA512
91ed8cd43ec7e1862c6565adc6ab6fb21188dbdeccaa9b5f15fcdd0af17b684253932ad27757e16857056f8d61174590553640d9012bc9a6d7be2df6debc5342
-
SSDEEP
3072:IcZ373SC4nf9Wo7nSAweoUuhPLkKPCYjWN3qNdI4pbqwrwHtyhK8O5:IK37321WCvweoUKLjKYiNAdRpWwm8hK8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3f2e8fd30333a61c12e21c3184aa491
Files
-
c3f2e8fd30333a61c12e21c3184aa491.exe windows:4 windows x86 arch:x86
9d8a7da95fc20d59f7e735a9bcfca117
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msimg32
AlphaBlend
TransparentBlt
kernel32
GetCalendarInfoA
GetThreadLocale
GetModuleHandleA
lstrlenA
HeapDestroy
GetLocaleInfoA
GetCurrentProcess
CreateProcessA
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
InterlockedExchange
WideCharToMultiByte
EnumResourceNamesA
GetEnvironmentVariableA
RaiseException
FindFirstFileW
GetACP
MultiByteToWideChar
lstrlenW
SetUnhandledExceptionFilter
HeapAlloc
ole32
CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ